VATICAN CITY – Pope Francis issued a groundbreaking new church law Thursday requiring all Catholic priests and nuns around the world to report clergy sexual abuse and cover-up by their superiors to church authorities, in a new effort to hold the Catholic hierarchy accountable for failing to protect their flocks.

Abuse victims and their advocates said it was a step forward, but not enough since it doesn’t require the crimes to be reported to police and essentially tasks bishops discredited for mishandling abuse for decades with policing their own.

The new law provides whistle-blower protections for anyone making a report and requires all dioceses around the world to have a system in place to receive the claims confidentially. And it outlines procedures for conducting preliminary investigations when the accused is a bishop, cardinal or religious superior.

It’s the latest effort by Francis to respond to the global eruption of the sex abuse and cover-up scandal that has devastated the credibility of the Catholic hierarchy and his own papacy. And it provides a new legal framework for U.S. bishops as they prepare to adopt accountability measures next month to respond to the scandal there.

“People must know that bishops are at the service of the people,” said Archbishop Charles Scicluna, the Vatican’s longtime sex crimes prosecutor. “They are not above the law, and if they do wrong, they must be reported.”

The decree requires the world’s 415,000 Catholic priests and 660,000 religious sisters to inform church authorities when they learn or have “well-founded motives to believe” that a cleric or sister has engaged in sexual abuse of a minor, sexual misconduct with an adult, possession of child pornography – or that a superior has covered up any of those crimes.

It doesn’t require them to report to police, however. The Vatican has long argued that different legal systems in different countries make a universal reporting law impossible, and that imposing one could endanger the church in places where Catholics are a persecuted minority. But the procedures do for the first time put into universal church law that clergy must obey civil reporting requirements where they live, and that their obligation to report to the church in no way interferes with that.

Abuse survivor David Clohessy dismissed the new set of procedures, saying they remain secretive and internal to the church.

If implemented fully, though, the Vatican could well see an avalanche of abuse and cover-up reports in the coming years. The decree can be applied retroactively, meaning priests and nuns are now required to report even old cases of sexual wrongdoing and cover-ups – and enjoy whistleblower protections for doing so.

Previously such reporting was left up to the conscience of individual priests and nuns.

Anne Barrett Doyle of BishopAccountability praised some of the provisions, but said they weren’t enough primarily because there were no provisions to sanction violations and kept the process entirely internal to the church.

“Bishops watching bishops does not work,” she said.

While there are no punitive measures foreseen for noncompliance, bishops and religious superiors could be accused of cover-up or negligence if they fail to implement the provisions, or retaliate against priests and nuns who make reports against them.

The law defines the crimes that must be reported as: performing sexual acts with a minor or vulnerable person; forcing an adult “by violence or threat or through abuse of authority, to perform or submit to sexual acts,” and the production, possession or distribution of child pornography. Cover-up is defined as “actions or omissions intended to interfere with or avoid” civil or canonical investigations.

Cardinal Marc Ouellet, head of the Vatican’s bishops office, said the inclusion of sex crimes involving adults was a clear reference to cases of sexual abuse of nuns and seminarians by their superiors – a scandal that has exploded in recent months following reports, including by The Associated Press and the Vatican’s own women’s magazine, of sisters being sexually assaulted by priests.

But Scicluna said it obviously covered lay people as well.

The pope mandated that victims reporting abuse must be welcomed, listened to and supported by the hierarchy, as well as offered spiritual, medical and psychological assistance.

The law says victims can’t be forced to keep quiet, even though the investigation itself is still conducted under pontifical secret. And in a novelty, the law requires that if victims request it, they must be informed of the outcome of the investigation – again a response to longstanding complaints that victims are kept in the dark about how their claims were handled.

Victims and their advocates have long complained that bishops and religious superiors have escaped justice for having engaged in sexual misconduct themselves, or failed to protect their flocks from predator priests. Bishops and religious superiors are accountable only to the pope, and only a handful have ever been sanctioned or removed for sex abuse or cover-up, and usually only after particularly egregious misbehavior became public.

Last summer, the scandal over ex-Cardinal Theodore McCarrick epitomized the trend: McCarrick rose to the heights of the Catholic hierarchy even though he had credible allegations of sexual misconduct against him that the Vatican had received. Francis defrocked McCarrick earlier this year after a U.S. church investigation determined he sexually abused minors as well as adult seminarians.

The new procedures call for any claim of sexual misconduct or cover-up against a bishop, religious superior or eastern rite patriarch to be reported to the Holy See and the metropolitan bishop, who is a regular diocesan bishop also responsible for a broader geographic area than his dioceses alone.

Unless the metropolitan bishop finds the claim “manifestly unfounded,” he must immediately ask permission from the Vatican to open a preliminary investigation and must hear back from Rome within 30 days – a remarkably fast turnaround for the lethargic Holy See. The metropolitan bishop then has an initial 90 days to conduct the investigation, though extensions are possible.

The law makes clear he can use lay experts to help, a key provision that is already used in many dioceses. And it recommends that a special fund be set up to pay for the investigations, particularly in poorer parts of the world.

Once the investigation is completed, the metropolitan sends the results to the Vatican for a decision on how to proceed.

The new law requires Vatican offices to share information throughout the process, since an untold number of cases have fallen through the cracks thanks to the silo-like nature of the Holy See bureaucracy.

The procedures published Thursday are likely to form a key legal framework for U.S. bishops when they meet in Baltimore June 11-13 to adopt new accountability procedures.

The U.S. hierarchy has been under immense public pressure to hold one another accountable for sexual misconduct and cover-up stemming from both the McCarrick scandal and the release of the Pennsylvania grand jury report. It was apparently an open secret that McCarrick slept with seminarians, and yet his brother bishops allowed him to become their spokesman when they first adopted measures to combat child sex abuse in 2002.

The law goes into effect June 1 for an initial three years. Dioceses must establish the reporting system and confirm it is in place to the local Vatican embassy by June 1, 2020.